Ot Network Engineer Iii

Target Hiring Range for OT Network Engineer III: $110,646 - $131,721 Annually
Does designing, managing and securing a modern telecommunications and network infrastructure for the 21st Century power grid appeal you? Do you have expertise in maintaining network security through rigorous monitoring, thorough auditing, and precise execution of controls? If yes, unlock your potential by taking action today! Benton PUD is seeking an experienced professional with a keen sense of independence and self-motivation to enhance our Information Technology group dynamic as an OT Network Engineer III.
As an OT Network Engineer, you will be responsible for designing, implementing, and maintaining the operational technology network infrastructure at Benton PUD. Your expertise will be critical for ensuring the reliability, security, and efficiency of our OT systems.
The primary purpose of this position is to lead the District's Operational Technology control system network to include: researching, architecting, designing, troubleshooting, documenting, and implementation of key network, radio, and computing resources; provide the enterprise security architecture for District technology and information systems; safeguard systems from attack by unauthorized users and design systems and countermeasures to protect against security breaches; develop and carry out information security plans and policies.
Are you interested in taking your networking engineering career to the next level with an organization that is dedicated to keeping the lights on in our community by providing a reliable source of electricity to over 56,000 customers? Come be part of the Benton PUD team that strives to deliver critical value to the customers we serve. Apply TODAY!

1. Support the District's mission to serve our customers and foster a positive workplace by personally choosing behavior aligned with our values and ethical code.
2. Monitor, audit, and execute security controls and tools to maintain network security by identifying potential security issues to include performing network security threat/impact assessments and scans, recommending security measures, installing and monitoring security devices, and installing patches, and updates as needed; lead mitigations efforts to remediate discovered security deficiencies.
3. Manage the risk of security exposure or compromise within District OT systems by providing awareness training on information security standards, policies and best practices.
4. Participate as a key member of the Security Incident Response Team by following the approved Cyber Security Incident Response Plan, providing key network security analysis, documentation, evidence gathering, and remediation as needed.
5. Provide professional guidance and recommendations to ensure the security and resiliency of the District's IT/OT Infrastructure and business systems by staying current with emerging trends in cyber security.
6. Ensure a reliable IT/OT network infrastructure by promoting system changes to production environments and documenting current system configuration in accordance with the approved District Configuration Change Management process, monitoring infrastructure performance and availability, and troubleshooting and tuning programs.
7. Ensure a reliable and scalable IT/OT network infrastructure by designing and maintaining a robust infrastructure including cabling, switches, routers, terminal servers, fiber optics, radio, and other networking equipment.
8. Monitor performance of District network resources by establishing real-time and historical monitoring and reporting tools, setting up threshold-based notifications to alert key staff of potential service-impacting issues, and logging and interpreting network traffic and throughput for required analysis.
9. Ensure resiliency of secure network authentication and access by designing and implementing appropriate encrypted communication methods.
10. Responsible for 24 hour on-call status and response, working flexible hours, or unscheduled travel to meet situational demands.
11. Ensure the District achieves and maintains mandated compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), NERC CIP, and PCI-DSS by designing and implementing a comprehensive network security architecture and adhering to internal District security policies.
12. Complete special projects and other duties as assigned to meet team, department and organization goals.

Required:

• BA/BS - Computer Science, Cyber Security or related field
• 5 to 7 years experience in design, implementation, theory and troubleshooting as a network/security engineer

A BA/BS is preferred; however, substitution is allowed for those with an approved job-related certification and at least an AA degree, with two (2) additional years of directly related experience.
Preferred:
Certifications in 1 or more of the following: Cisco Certified Network Architect (CCNA), Cisco Certified Network Professional (CCNP), Cisco Certified Internetwork Engineer (CCIE), Certified Ethical Hacker (CEH), Certified Information Systems Security Progression (CISSP)
Knowledge, Skills and Abilities:
Network

• Advanced experience with network protocols (MPLS, EIGRP, OSPF, BGP, VLAN, TCP/IP, radio systems, and fiber optics (DWDM, CWDM), etc.)
• Advanced experience configuring, maintaining, designing, and deploying Cisco networking equipment.
• Working knowledge of Verizon private network and cellular communications.
• Working knowledge with DNP3 and/or MODBUS.
• Advanced experience in deploying and managing Firewalls, and troubleshooting VPN tunnels
• Advanced knowledge of server hardware, routing and switching equipment and interconnecting cabling
• Advanced knowledge of Internet Protocols, static IP addressing schemes, IPAM, DNS, DHCP.

Security

• Advanced knowledge in server operating systems (Linux, Windows)
• In-depth experience with security testing (DoS, XRSF, XXS, Brute Force)
• Working knowledge of a SIEM application
• In-depth knowledge of Network Management Software and Monitoring Tools
• In-depth knowledge of Intrusion Detection and Intrusion Prevention
• In-depth knowledge of Automated security testing software
• Working knowledge of Forensic investigation and analysis

General

• Strong problem-solving skills to effectively research, investigate and offer solutions to issues that are more complex and difficult in nature
• Excellent verbal and written communication skills with the ability to communicate security-related concepts to a broad range of technical and non-technical staff to include leadership
• Ability to stay current with technology and apply training and experience to real world problems
• Successful completion of the District's approved leadership program for the position
• Highly motivated and independent strategist capable of creating and implementing comprehensive security policies

• Attendance: Consistent need to attend work at the job site or work location. Frequent or constant need for punctuality.
• Physical Effort: Most all of the time is spent sitting in the same position or standing/walking, or there is some requirement to lift or handle material or equipment of moderate weight (8 - 20 pounds, sometimes more).
• Environment: Located in a comfortable indoor area. Any unpleasant conditions would be infrequent and not objectionable.
• Hazards: Most of the time is spent in general office or equivalent conditions.
• Sensory Attention: Typically requires regular use of one or more senses of medium intensity and long duration.
• Job Pressure/Deadline Orientation: Must meet reasonable deadlines, quotas or demands for accuracy and/or may be involved in some mildly unpleasant situations.

Employment Type: Full Time, Regular, Exempt